[tor-talk] "Invalid Server Certificate" accessing torproject.org on Chrome/Windows

[Greg]

The hotfix worked for me! Hopefully it didn't break anything :)

Thanks, Ondrej!

Greg

2012/1/5 Koh Choon Lin <2choonlin at gmail.com>:
> Hi
>
> On Fri, Jan 6, 2012 at 10:18 AM, Greg <Greg at alumni.brown.edu> wrote:
>> Great! I will try this out when I get home today.  That link says to
>> install the hotfix located here:
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;938397
>>
>> Thanks,
>> Greg
>>
>> 2012/1/5 Ondrej Mikle <ondrej.mikle at gmail.com>:
>>> On 01/05/12 17:52, Greg wrote:
>>>>
>>>> Hey Ondrej,
>>>> Here's some info from msinfo32:
>>>>
>>>> OS Name Microsoft(R) Windows(R) Server 2003, Enterprise
>>>> EditionVersion  5.2.3790 Service Pack 2 Build 3790OS
>>>> Manufacturer    Microsoft Corporation
>>>> System Manufacturer     MSI
>>>> System Model    MS-7350System Type      X86-based PCProcessor   x86 Family
>>>> 6
>>>> Model 15 Stepping 11 GenuineIntel ~3000 MhzProcessor    x86 Family 6
>>>> Model 15 Stepping 11 GenuineIntel ~3000 MhzHardware Abstraction
>>>> Layer   Version = "5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"
>>>
>>>
>>> Problem solved: Windows Server 2003 and WinXP before SP3 do not support
>>> SHA256 hash (and other SHA-2 family hashes), that's why the cert validation
>>> fails. (Well, CryptoAPI could have given a more meaningful error...)
>>>
>>> See for details:
>>> http://www.pkware.com/documents/CertificateInteroperability.pdf
>>>
>>> Ondrej
>
> Will be trying this over the weekend too. Hopefully I can get a server
> edition to experiment too. Thanks for the link.
>
>
> --
> Regards
> Koh Choon Lin
> _______________________________________________
> tor-talk mailing list
> tor-talk at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk